Cisco security advisory (AV26-757)
Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.
Serial number: AV26-757 Date: July 29, 2026 As of July 29, 2026, Cisco is affected by a vulnerability in the following product: Cisco Secure Firewall Management Center (FMC) Prior to 7.0.9.1 Prior to 7.2.11.1 Prior to 7.4.7.1 Prior to 7.6.5.1 Prior to 7.7.12.1 Prior to 10.0.1.1 Cisco has indicated that CVE-2026-20316 is being exploited. On July 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20316 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Cisco Security Advisories Cisco Secure Firewall Management Center Software Static Credential Vulnerability CISA KEV : CVE-2026-20316
CSIRTS triage
- What
- There is a vulnerability that allows for remote code execution and a breach of security policy.
- Who is affected
- Deployments of Cisco Secure Firewall Management Center prior to the specified versions are affected.
- Urgency
- Remediation is urgent as the vulnerability is actively exploited.
- Action
- Users should apply necessary updates as they become available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Cisco Secure Firewall Management Center
Get an email when a new Cisco Secure Firewall Management Center advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-757
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Exploitation confirmedCVE-2026-20316Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 53% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20316 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- highexploitedCisco Secure Firewall Management Center Software Static Credential Vulnerabilitycisco-psirt
- medium[NEW] [medium] Cisco Secure Firewall Management Center: Vulnerability allows information disclosurecert-bund
- unknownNCSC-2026-0271 [1.00] [M/H] Vulnerability fixed in Cisco Secure Firewall Management Centerncsc-nl
- unknownCisco Secure Firewall Management Center Software Information Disclosure Vulnerabilityhkcert
- unknownexploitedVulnerability in Cisco Firewall Management Center (July 30, 2026)cert-fr-avis
- mediumexploitedCVE-2026-20316: A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software…nvd
- highexploitedCISA Adds One Known Exploited Vulnerability to Catalogcisa
- criticalexploitedCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerabilitycisa-kev
More from Canadian Centre for Cyber Security
- unknownGoogle security advisory (AV26-768)2026-07-31
- unknownRails security advisory (AV26-767)2026-07-31
- unknownSolarWinds security advisory (AV26-766)2026-07-31
- unknownGladinet security advisory (AV26-765)2026-07-30
- unknownPHP Group security advisory (AV26-764)2026-07-30